Intel Rapid Storage Technology CVE-2019-14568 Local Privilege Escalation Vulnerability

Description

Intel Rapid Storage Technology is prone to a local privilege-escalation vulnerability. An attackers may exploit this issue to gain elevated privileges. Versions prior to Intel Rapid Storage Technology 17.7.0.1006 are vulnerable.

Technologies Affected

• Intel Rapid Storage Technology 10.1.0.1008
• Intel Rapid Storage Technology 11.7.0.1013
• Intel Rapid Storage Technology 12.9.0.1001
• Intel Rapid Storage Technology 13.6.0.1002
• Intel Rapid Storage Technology 14.8.16.1063
• Intel Rapid Storage Technology 15.9.8.1050
• Intel Rapid Storage Technology 16.7
• Intel Rapid Storage Technology 16.8.3.1003
• Intel Rapid Storage Technology 17.5.2.1024
• Intel Rapid Storage Technology 9.6.0.1014

Recommendations

Permit local access for trusted individuals only. Where possible, use restricted environments and restricted shells.
Permit access to systems for trusted and accountable individuals only.

Updates are available. Please see the references or vendor advisory for more information.